PT-2005-1001 · Openvpn · Openvpn

Mike Ireton · Publicado 2005-08-24 · Atualizado 2008-09-05 · CVE-2005-2531

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions OpenVPN versions prior to 2.0.1

Description The issue allows remote attackers to cause a denial of service, specifically client disconnection, via a large number of failed authentication attempts. This can happen when OpenVPN is running with "verb 0" and without TLS authentication, causing the error to be processed by the wrong client. The vulnerability can be exploited remotely and may lead to disruption of protected information.

Recommendations For OpenVPN versions prior to 2.0.1, update to version 2.0.1 or later to resolve the issue. As a temporary workaround, consider enabling TLS authentication to minimize the risk of exploitation.

Correção

Identificadores relacionados

BDU:2015-01740

CVE-2005-2531

DSA-851-1

Produtos afetados

Openvpn

Referências · 17

• https://osv.dev/vulnerability/DEBIAN-CVE-2005-2531 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2005-2531 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2533 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2005-2531 · Aviso do Fabricante
• http://debian.org/security/dsa-851 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2534 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2005-2531 · Nota de Segurança
• http://openvpn.net/changelog.html · Nota
• http://mandriva.com/security/advisories?name=MDKSA-2005:145 · Aviso do Fabricante
• http://debian.org/security/2005/dsa-851 · Aviso do Fabricante
• http://secunia.com/advisories/17103 · Nota
• http://novell.com/linux/security/advisories/2005_20_sr.html · Aviso do Fabricante
• http://secunia.com/advisories/16463 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2531 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2532 · Nota de Segurança